Security Analyst – Risk Management Program

Seeking an experienced Security Analyst to support the Risk Management Program for a leading academic healthcare and research environment in Charlottesville, Virginia. This position will play a critical role in protecting clinical, research, and business information assets by conducting security risk assessments, evaluating security controls, supporting regulatory compliance initiatives, and partnering with stakeholders across healthcare, research, and technology teams.

The ideal candidate possesses a strong cybersecurity background combined with experience in risk management, governance, compliance, and project coordination within a healthcare, higher education, or regulated environment.

Key Responsibilities

Risk Management & Security Assessments

• Conduct security risk assessments for healthcare, research, and enterprise technology initiatives.
• Evaluate risks related to confidentiality, integrity, and availability of protected health information (PHI), research data, and critical business systems.
• Identify security gaps and develop risk-based recommendations for remediation.
• Maintain risk registers, track mitigation activities, and support ongoing risk reporting.
• Perform vendor and third-party security reviews to assess organizational risk exposure.

Security Control Reviews

• Review and validate technical, administrative, and physical security controls.
• Assess compliance with organizational policies and regulatory requirements.
• Evaluate security controls supporting research projects, clinical systems, cloud environments, and enterprise applications.
• Collaborate with IT and security teams to ensure required controls are implemented and operating effectively.
• Document findings, recommendations, and corrective action plans.

Governance, Risk & Compliance (GRC)

• Support cybersecurity governance and risk management programs.
• Assist with security audits, compliance reviews, and evidence collection activities.
• Contribute to...